Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/55c4e678-7125-3172-a07f-4c4af679928e.roa
File:                     55c4e678-7125-3172-a07f-4c4af679928e.roa (raw, json)
Hash identifier:          Ze4n2jMqFeSujGmv73fAYS18tJx4ZHzCc4+TJXEMtFw=
Subject key identifier:   61:47:31:5F:D9:F7:16:85:8B:0D:D5:CB:32:BD:03:25:28:29:3B:7D
Certificate issuer:       /CN=41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de
Certificate serial:       010D0C9F4328584BA7CD1DBF920104ADFEBC6900
Authority key identifier: A6:A6:0C:CE:DC:3F:02:49:BC:02:AC:F3:6C:C5:D3:09:E6:26:8B:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/55c4e678-7125-3172-a07f-4c4af679928e.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     15176
IP address blocks:        2606:6ac0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cd:1d:bf:92:01:04:ad:fe:bc:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=5c087e1e-bc1e-46a0-a688-af069152d0f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c5:bd:29:4b:88:a0:1e:0f:7e:e8:e4:40:14:
                    a9:a9:b9:ec:fe:70:1e:9c:84:83:2d:27:f9:6c:30:
                    3c:88:aa:bc:ab:94:78:10:7e:8a:59:2f:1b:94:f0:
                    9b:66:38:56:4c:58:91:0e:b1:92:4b:a9:db:d2:f8:
                    74:31:15:39:3c:ea:97:ee:a7:9e:97:9a:a7:5b:15:
                    ef:c5:eb:09:88:9f:25:04:e5:fc:eb:90:f1:46:96:
                    ba:d9:1c:4b:e0:fc:54:f8:a2:7e:89:fd:10:db:61:
                    1c:c4:5f:7d:85:bc:37:76:8b:f1:ff:be:56:46:da:
                    83:0c:83:10:5f:fe:f3:d6:20:11:bf:82:9f:03:b6:
                    da:eb:29:87:71:cb:86:bd:b7:3a:75:48:73:8a:99:
                    3e:57:3f:46:75:4e:05:f6:e5:ac:41:28:4d:63:4b:
                    9d:13:8d:73:6a:97:65:23:e1:5e:4f:be:f0:3f:cf:
                    fd:b5:d6:dd:81:60:0d:e9:52:79:cc:1a:46:a6:0b:
                    86:54:ee:f3:f1:42:a3:af:d1:23:3a:99:6a:3e:5d:
                    f4:34:8c:94:08:75:82:ba:f7:31:cb:eb:b9:ee:70:
                    05:ce:c0:b6:d5:b5:e2:1e:08:88:c8:b2:90:3a:12:
                    d2:f5:b8:0b:1e:05:49:78:bd:52:ba:88:d5:bb:2b:
                    a7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:47:31:5F:D9:F7:16:85:8B:0D:D5:CB:32:BD:03:25:28:29:3B:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/55c4e678-7125-3172-a07f-4c4af679928e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.crl

            X509v3 Authority Key Identifier:
                keyid:A6:A6:0C:CE:DC:3F:02:49:BC:02:AC:F3:6C:C5:D3:09:E6:26:8B:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6ac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:8c:e4:2b:0b:af:ed:05:39:d1:6e:64:e3:d5:41:79:e4:2e:
         90:ff:c7:f1:46:fa:18:58:ae:59:c3:7d:ec:ac:f5:21:42:00:
         e8:6b:59:45:a2:48:a4:a8:8b:16:ff:cd:de:07:b9:02:a1:50:
         78:c3:09:0e:83:ab:49:d4:04:77:2a:38:b1:7e:41:7a:93:bd:
         1e:ec:3a:df:e4:f5:75:e3:11:51:2c:a6:ab:f2:20:be:82:4f:
         45:85:73:72:db:ad:a2:aa:69:c5:cd:d4:20:fd:c8:0d:14:23:
         d7:4a:05:80:08:d2:38:4f:d0:7e:6a:ab:9f:2e:51:f1:63:74:
         94:0f:90:ca:d7:7f:25:3b:1d:db:a1:eb:6a:a0:2f:21:9f:b0:
         0f:91:3a:36:89:68:4e:f3:7f:97:8d:56:73:31:32:7a:57:83:
         5f:c3:e1:f3:d4:5d:d7:ad:f3:86:59:d3:fe:c8:91:0c:b2:95:
         5c:1b:8f:5d:20:68:e5:b9:f1:19:16:d2:db:2c:ed:c7:11:bb:
         86:8a:47:38:88:5e:77:79:5e:51:c9:b3:85:35:74:5a:e9:24:
         bb:40:6c:1b:7b:25:f9:ea:59:49:a9:43:3f:f1:d4:f1:14:e4:
         bc:b3:6b:79:ec:b4:48:e4:cf:68:02:74:d1:2d:03:38:f3:05:
         40:e7:8c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:08:38 2025 by rpki-client